
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30156/zIsXeZ_xl5vb3J0YK-ekQVnLXy4.roa
File: zIsXeZ_xl5vb3J0YK-ekQVnLXy4.roa (raw, json)
Hash identifier: AwKrqWb8Vc7dzouVmd6odgTBTh4W/kWNCRwlOcLyXnw=
Subject key identifier: CC:8B:17:79:9F:F1:97:9B:DB:DC:9D:18:2B:E7:A4:41:59:CB:5F:2E
Certificate issuer: /CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Certificate serial: 73
Authority key identifier: 66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/zIsXeZ_xl5vb3J0YK-ekQVnLXy4.roa
Signing time: Tue 31 Mar 2026 07:29:50 +0000
ROA not before: Tue 31 Mar 2026 07:29:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 55392
IP address blocks: 2404:8e01::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Validity
Not Before: Mar 31 07:29:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CC8B17799FF1979BDBDC9D182BE7A44159CB5F2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:0f:10:73:68:2e:eb:bc:b4:85:9e:51:74:
ed:39:46:ef:41:de:36:11:97:0a:5a:48:25:03:3e:
4d:26:88:12:f1:d8:a9:8b:45:e2:38:ec:c6:48:af:
f8:e6:e7:dd:c7:9c:d6:4c:28:15:f2:11:5c:16:a6:
2a:a3:f4:0a:4b:23:ec:df:9f:c9:17:9a:51:ad:82:
11:87:fd:50:64:37:c4:9a:24:ae:79:ec:8a:b1:fd:
8f:b0:6e:c3:23:0f:16:3d:d6:d4:be:80:49:4a:3e:
94:5b:80:10:fc:84:af:58:c3:7f:d9:83:a3:ba:07:
a8:19:d5:ca:50:8c:39:65:36:04:90:5d:f3:10:9d:
cf:e4:6f:79:6c:da:36:3a:6f:a4:4b:12:73:76:26:
60:93:07:98:99:1a:5e:6c:96:fe:7b:7a:c7:fe:6d:
57:a0:73:a3:2f:95:89:52:37:02:92:f4:24:93:33:
d6:95:2c:80:1e:b3:37:85:a1:90:d9:2d:25:54:c5:
a5:79:d1:20:fc:19:80:84:31:15:f0:30:f9:c3:36:
64:0d:55:f6:9c:fd:51:25:b3:a9:96:17:79:6a:7d:
c0:bf:99:4f:60:5d:29:f4:68:4f:0a:0a:f2:c4:1e:
98:b0:e5:6b:9a:38:79:16:98:f2:92:bc:18:d8:55:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8B:17:79:9F:F1:97:9B:DB:DC:9D:18:2B:E7:A4:41:59:CB:5F:2E
X509v3 Authority Key Identifier:
keyid:66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/zIsXeZ_xl5vb3J0YK-ekQVnLXy4.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:8e01::/32
Signature Algorithm: sha256WithRSAEncryption
9b:27:7b:49:37:cd:1b:ed:90:bd:ce:ef:fa:24:56:95:50:04:
5c:39:6e:ab:98:0b:eb:ba:b6:dc:ee:17:74:8c:8a:ad:f4:ba:
00:9f:83:41:60:73:63:ec:e4:88:6c:f3:08:77:2f:1c:07:7b:
2a:35:92:03:a7:d9:a8:48:8e:0b:c4:91:29:11:de:83:a9:0c:
ca:b7:2e:b2:14:af:64:36:f1:ae:a9:04:c3:f1:ec:0e:5f:d4:
7e:bb:e9:d5:d0:e7:af:bc:77:33:f4:bc:0e:70:8d:c5:ac:d1:
e1:16:ad:18:7e:c9:7b:59:3c:4a:e3:91:03:24:82:a1:e4:51:
52:37:8d:98:9a:51:8e:47:07:65:3b:a0:5e:13:31:fe:d3:15:
07:80:ee:a6:56:47:ae:f2:76:82:fb:b2:be:73:39:e4:8b:b1:
bb:53:9d:5a:9b:85:e2:aa:af:37:fe:3f:d0:cc:60:60:10:b7:
6e:ce:6a:98:e4:90:57:51:9c:04:3b:60:9a:28:38:59:6b:d3:
f5:0d:17:15:7c:57:19:0c:6d:03:ed:59:7a:12:63:d1:42:f8:
26:44:fe:83:ae:2e:4f:d4:00:ad:02:c1:7c:6c:86:5c:95:db:
44:54:78:f6:01:c9:4e:67:3f:59:b8:e8:68:7a:8b:3d:9b:cd:
12:ba:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:32 2026 by rpki-client